Unlocking the Cloudflare app ecosystem with OAuth for all
Jun 24, 2026Sam Cabell, Mike Escalante, Adam Bouhmad, Nick Comer
Summary
This post details the technical implementation and challenges of upgrading Cloudflare's internal OAuth engine from Hydra 1.X to 2.X. It covers the strategies used to minimize user impact during the upgrade, including custom SQL migrations, a blue-green deployment strategy, and the implementation of a queue system for replaying revocation events. It also discusses performance improvements observed post-upgrade in both the database and the Hydra service.
More from the Cloudflare Apps Program trail
- Cloudflare Zaraz adds support for server-side rendering of X and Instagram embeds
- Building and using Managed Components with WebCM
- Cloudflare Zaraz launches new privacy features in response to French CNIL standards
- Our growing Developer Platform partner ecosystem
- Open source Managed Components for Cloudflare Zaraz